CVE-2016-2198
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 5, 2024
- Reserved
- Jan 29, 2016
Description
QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20160130 Re: CVE request Qemu: usb: ehci null pointer dereference in ehci_caps_writemailing-list
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security updatemailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1301643
- [oss-security] 20160129 CVE request Qemu: usb: ehci null pointer dereference in ehci_caps_writemailing-list
- GLSA-201604-01vendor-advisory
- [qemu-devel] 20160129 [PATCH] usb: ehci: add capability mmio write functionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.